Sample Rules

[Valdis.Kletnieks at vt.edu]

On Thu, 10 Feb 2005 13:50:50 PST, Casey Schaufler said:

> Chuckle. Irix does not have audit classes.
> This is for the simple reason that Solaris
> does and the lesson learned is that it is
> impossible to find any two people who can
> agree on what should be grouped together.
> On Irix you have to tell it what events
> you want.

As a first cut, probably a list of equivalences (Irix calls the
record Foo, Solaris Bar, AIX Baz - use Quux on Linux) would be a big
help...
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20050210/5cbecc20/attachment.sig>